42 lines
757 B
Nix
42 lines
757 B
Nix
{
|
|
pkgs,
|
|
inputs,
|
|
system,
|
|
...
|
|
}:
|
|
let
|
|
selfPkgs = inputs.self.packages.${system};
|
|
in
|
|
pkgs.dockerTools.buildImage {
|
|
name = "oidcwarden";
|
|
fromImage = import ../base { inherit pkgs; };
|
|
|
|
copyToRoot = pkgs.buildEnv {
|
|
name = "root";
|
|
paths = with selfPkgs; [
|
|
oidcwarden
|
|
oidcwarden.webvault
|
|
];
|
|
pathsToLink = [
|
|
"/bin"
|
|
"/share"
|
|
];
|
|
};
|
|
|
|
config = {
|
|
Entrypoint = [ "/bin/oidcwarden" ];
|
|
Env = [
|
|
"WEB_VAULT_FOLDER=${selfPkgs.oidcwarden.webvault}/share/vaultwarden/vault"
|
|
"DATA_FOLDER=/var/lib/vaultwarden"
|
|
"ROCKET_PROFILE=release"
|
|
"ROCKET_ADDRESS=0.0.0.0"
|
|
];
|
|
Volumes = {
|
|
"/var/lib/vaultwarden" = { };
|
|
};
|
|
ExposedPorts = {
|
|
"8000/tcp" = { };
|
|
};
|
|
};
|
|
}
|